ICORP GROUP · INSIGHTS
Healthcare Technology in JCI 8: Managing EHR, Telehealth and Cybersecurity
One of the key changes to JCI 8th Edition is the introduction of a new Healthcare Technology Chapter which JCI indicated that it covers electronic health records, telehealth and cybersecurity. Those should not be considered as IT tasks, apart from the quality and safety systems of patients.
Technology Governance needs a joint owner
Medical technology and patient information systems involve IT, clinical, quality and risk teams, as well as leadership. Key decisions about system changes, access permissions or telehealth need governance that considers their impact on patient care and real operations.
EHR needs to support Clinical Workflow
Electronic Health Record with a lot of information but difficult use may increase the burden and risk. The hospital should review whether recording, browsing and transmission of key information is in line with Workflow or not. Includes a clearly visible key data specification.
Telehealth needs standard service.
Telehealth is not just opening a video channel, but requires specification of the scope of service, patient confirmation, adequacy of service, recording, transmission and management in case of emergency or system interference.
Cybersecurity is Patient Safety
If the system is attacked or key data is not accessible, it can affect direct treatment. So cybersecurity should be managed in conjunction with Risk Management and Business Continuity, not just protection of data leakings.
Downtime Plan Really Needed to Test
Hospitals should ask whether frontline teams know how to record information, order medication and communicate test results when the EHR or another core system is unavailable, and how to reconcile the information when service returns. A plan that exists only on paper and has never been tested may not be sufficient in a real incident.
Themes to be imported to internal assessment
- Access Control and User Rights Review
- Critical System Downtime and Recovery
- Clinical Communication Between Systems
- Telehealth Workflow and Documentation
- Cyber Incident Escalation
- User Training and Change Management
The JCI 8 preparation in Technology should take the Risk-Based Approach by selecting Critical Systems first and then examine how the risks from those systems are managed in connection with Patient Safety and Continuity of Care.
Note: This content explains concepts from public JCI 8th Edition announcements. It does not replace the standards manual or the technical requirements of any particular system.